546 Configuring Access Control Lists
7
Verify the configuration.
console#show ip access-lists web-limit
IP ACL Name: web-limit
Inbound VLAN(s):
100
Rule Number: 1
Action............................ deny
Match All......................... FALSE
Protocol.......................... 6(tcp)
Source IP Address................. any
Destination IP Address............ any
Destination L4 Port Keyword........ 80(www/http)ip
Time Range Name....................work-hours
Rule Status....................... inactive
Configuring a Management Access List
You can create a management access list that contains rules to apply to one or
more in-band ports, LAGs, or VLANs to limit management access by method
(for example, Telnet or HTTP) and/or source IP address.
NOTE:
Management ACLs cannot be applied to the OOB port.
Management Access List Commands
Beginning in Privileged EXEC mode, use the following commands to create a
management access list. There is an implicit deny-all rule at the end of every
management ACL. This means that any host that does not meet the criteria
defined in a permit command is denied access to the management interface.
NOTE: Management ACLs can be applied only to in-band ports and cannot be
applied to the OOB port.
Command Purpose
configure Enter Global Configuration mode.
To Next Page
Loading...
Need help?
General